Beveiligingsadvies

CVE-2025-25243

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-11 00:38:02

Laatst bijgewerkt 2025-02-18 18:03:33

Toegewezen door sap

CVSS-score 8.6

Status PUBLISHED

Beschrijving

SAP Supplier Relationship Management (Master Data Management Catalog) allows an unauthenticated attacker to use a publicly available servlet to download an arbitrary file over the network without any user interaction. This can reveal highly sensitive information with no impact to integrity or availability.

← Alle CVE's bekijken Bekijk op cve.org ↗